Information Disclosure in Cisco Linksys Wireless Video Camera

CVE-2009-1560

Summary

The Cisco Linksys WVC54GCA wireless video camera versions 1.00R22 and 1.00R24 contain a serious security vulnerability where sensitive information, such as passwords and wireless network keys, is stored in cleartext. This issue resides in the files 'pass_wd.htm' and 'Wsecurity.htm', which, if accessed by an attacker, can lead to unauthorized retrieval of crucial data through HTML source code exposure. Unsuspecting users of this camera should be aware that an attacker can exploit this vulnerability to gain insight into one’s wireless network configurations and credentials.

References